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OPINION & ORDER 
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HONORABLE PMH. A. l^OlTY.UuilalSlalKDislriclJiKlBe: 

|. rom March to November 2017, the website WikiLeaks made a senes <1 dtsclosures ol 
, ourc c code a„d documents (the “leaks", relating to cyhc, tools developed by the Central 
Intelligence Agency 0™> The Oovcrnmen, has charged .loshua Schulte, a lor,net C,A 
employee, with stealing and leaking national defense information, along with other charges, 

which include possession of child pornography and copyright infringement. (I)kt. «•) 

The (iovenmtern has moved c.v,x« pursuant to Section 4 of the Classifled intormanon 

Procedures Act, ,« U.S.C. APP. 3 COPA", - ** « ^ " '««*> ^ ^^ 
s0 , ta , the Government need no. produce certain materials .ha, contain clashed tuCormcon. 

Pursuant to CIl'A. the Oovcrnmen, did no, submit its .notion to Schulte. The Government dtd. 

h , m ,.ver. notify defense counsel th'a, I, made a e.assilied «,««■ suhntission lo the Court on 

December 10,2018. 

The Government has produced a large volume of classified discovery to Schulte, 

defense counsel who have obtained the necessary .security clearances, pu» MWIl! lo 1 p 

... . r, rr : m 11 KitdltU- 'be Government has also 
outlined in CU 1 A. Under CIPA S 4anJVed. R.< run. I . Wm . 

,, m lhc „ a ds that i, is no, discoverable and/or that the state-secrets 

withheld some diseovety on tne oasis 

















Case 1:17-cr-00548-PAC Document 124 Filed 07/22/19 Page 2 of 13 


privilege. applies u, ft* data and ft, disclosure Schulte i» no, required „„ Ucr ( |1>A, sincc „ 
W„„,d PC be helpful or materia, ,o hi., delense. This will,held i„f„„„a,i„„ i„ clu(lcs specific 
documents (,=e ta/m Section II.A), email communications ,, fra , Secliol , „ B)> a „ d ^ 
evidence (see infra Section II.C), 

Over Ihe m several months, ft* Curt has reviewed ft* Government's CIPA § 4 
briefing, specilic documents ft*, were whhhelU, and ihe methodology used for withholding 
forensic data from discovery. The Conn held apm hearing, with the Government discuss 

" K aM 5 4 mm>m ’ ma “ pm **»« counsel learn about Schulte’s del'cnse and 
discovery needs, heard from both parties in join, discovery conferences, and reviewed written 
subniissions from both parties detailing discovery disputes. In considering ail of this 
information, the Court placed i.scIMn the shoes of defense counsel, the very ones ft* cannot 
see the ctas.si.ied record." to determine whether the withheld data might he relevant and helpful 
to the defense. United Slates v. Amuwj, 695 FJd 4.17, 471 (dth Or. 2012). 

Based on this full review and for the following reasons, the Government is directed to 

disclose certain addition,,) information to defense counsel, the remainder of the Government's 
motion is grunted. 

discussion 

*• Legal Standards 
A. Rule 16 

M R - ‘ '■ 16 S,WCmS '’ re,ri “' i- minimal n„„ers. !)*„„ aml 

objects in the government's controi are discoverable If,,,they are "materia, to preparing the 
defense," (2, "the government intends to use |them| in its ease-in-ehief a, trial," or (3) lhcv wcrc 
"obtained from or belong!] hi the defendant." Fed. R. Grim. P. l6(a)(C). 
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“Discoverable- infatuation in the CII'A context includes "what should bo made available 
in pretrial discovery, as well as exculpatory (acts, or information relevant to the credibility of 
government witnesses, that need not be disclosed before trial but nonetheless must be made- 
available in time tor effective use at trial." (Anted Sum ». IMmm, 870 F. Supp, 47, 50 

(S.D.N.Y, 1994). 

B. CFPA Standard 

CIP A provides for the protection of classified information in criminal cases. The statute 
is "meant to protect and restrict the discovery of classified information in a way that does not 
impair the defendant's rigid u> a fair trial." (Anted Sum »•. Aref, 535 P.3d 72,7S (2d Or. 2008) 
(alterations and internal quotation marks omitted). “The Second Circuit has found that the 
governmental privilege contemplated under CII'A has its origins in the stale secrets privilege, 
which 'allows the government to withhold inlormation from discovery- when that disclosure 
would be inimical to national security.™ (/niter I Sum r. Ng Lap Seng. No. S5 15-CR-706 
(VSU), 2017 Wl. 2693025, at *2 (S.D.N.Y. lane 21.2017) (quoting (trifled Sum v. Abu-MwJ, 

630 [-'.3d 102, 139-40 (2d Cir. 2010)). 

Where classified information is implicated in criminal discovery, the government may 
make an ex pane motion to “delete specified items of classified information from documents to 
be made available to the defendant through discovery under the Federal Rules of Criminal 
Procedure, to substitute a summary of the information for such classified documents, or to 
substitute a statement admitting relevant facts that the classified information would tend to 

prove.” 18 U.S.C. ARP. 3 § 4. 

“In a case involving classified documents ., . ex pane, in camera hearings in which 
government counsel participates to the exclusion of defense counsel are part o! the process that 







Case 1:17-cr-00548-PAC Document 124 Filed 07/22/19 Page 4 of 13 


" K CW ‘ rt “ ” WdCr *'** *■ rile m,i,n„ a ,„„, . V „ ludSmes „ 

144 F.3d 1249, 126, <9,„Cir. Such hearing are ^ ,, f , hc 
«« h» questions about ,1, confidential nature „r„, i nl „ rmali „ n or ^ y 

-fin,, with me Government »*** » , 4 submissions „ ^ ^ 

m S ,,, when cases involve discovery ofoiassified information, even where defense e„„ M e, ha, 
secured secufiiy eiearanees. ,ee. „, AW , 07 Cr . 3J „ (JSR) ^ 

****** " Kmm '' S2 04 Cr - 356 <JKK) "• M* understand U, discovery need, of 

Ocicndanrs considering CfPA 5 4 motions, courts sometimes hold , w conierettces with 

request expm submissions fin,,, defense coun.se,. ,ce *W. S2 04 Cr, 356 (ILK, pow, 

As . threshold matter, a CPA , 4 motion must cstubiisl, that the information a, issue h 
."deed classified. Classified intbnnation is -any ... „ material that tas ^ 

determined by the United States Government pursuant to „„ , !M „,ive order, statute or 

rc8Ula,i0n ' . .. .. **>»« for reasons of nation,, Purity 

and any res,noted data, as defined in paragraph r . of see,i,,,, ,, „f , hc Almnic E Ac , of 

1954(42 U.S.C. 20l4(y)).” 18 list' app t k \< \ m • 

. ' ' § (a) ' Nat,onal security is “the national defense 

and toicign relations of the United Slates.” 18 U.S.C. APP. 3 § j(| 7 j 

S ’ A! * 1 § 4 ,WS ,K ' Cn ,nadc ' SUch thm lhc s(ate secreis privilege overrides a 
defendant \s right to prepare a defense; 

(1) whether the tnuterial in dispute is discoverable under Rule 16 ; 

( 2 ) whether the sta,e,ee,e ls privilege appiies, because -there is t, reasooabie danger 

' te “" ,P " ISi °" ° f ‘" C " iM »„ie„, in ,he i„te TO , „f„ alio „ al ' 


4 
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security, should not be divulged" and (b) "the privilege is lodged by the head of the department 
which has control over the matter, after actual personal consideration by that officer”; and 

(3) whether the material is helpful or material to the defense, which need not rise to the 
level of exculpatory information contemplated by Brady. See Aref> 533 l\3d at 80. 

tf ihc court finds that the information is discoverable and helpful or material to the 
defense, the court then must decide whether the information should he disclosed and the form m 
which it should be disclosed. If the information is relevant or helpful, the court must balance the 
“public interest in protecting the flow of information against the individual’s right to prepare his 
defense.” Untied States v. MostaM 992 1-'. Supp. 2d MS. MR (S.D.N.Y. 20.4) (quoting Ration 
v. United Suites, 353 IJ.S. 53. 62 (1957)). When determining whether discoverable, helpful, and 
material classified material should be disclosed to the defense, “the test to he applied involves 
balancing the defendant’s need for the information or its value to the defendant, against the 
possible damage to the government’s security interests from disclosure.” Rahman, 870 V. Supp. 

at 52. 

“While the government must safeguard classified information in the interest ot national 
security, ‘courts must not be remiss in protecting a defendant’s right to a full and meaningful 
presentation of his claim to innocence.”’ United States v. Sedayhaty. 728 1* -3d 885, 90.i ()th Cii. 
2013) (quoting United Stales v. Fernandez, 913 K.2d 148. 154 (4th C ir. 1990)). ‘11 ]hc 
defendant’s right to a trial that comports with the Fifth and Sixth Amendments prevails over the 
governmental privilege"; if the Government refuses to produce the information the Court orders 
produced, the result is dismissal of the charges. United States v. Monssaoni, 382 F.3d 453. 474 
(4th Ctr. 2004). Stilt, the fact that defense counsel obtained security clearances does not permit 
unfettered access to classified discovery that a Court deems is not discoverable after conducting 
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the C1PA § 4 analysis. See United Slam v. Libby, 429 F, Supp. 2d 18, 24, amended, 429 F. 
Supp. 2d 46 (D.D.C, 2006) (defense team’s security clearances “does not entitle them to view 
documents . .. that may discuss particularly sensitive issues with profound national security 

implications whose viewing is permitted only upon a showing that there is a ‘need-to-know the 
information”’). 

A court may order the government to disclose the classified information as is, or in some 
other form, such as with redactions or in a summary. See Rahman, 870 F. Supp. 47; I 8 U.S.C. 
APP. 3 § 6(c)(1) (authorizing “(A) the substitution for such classified information of a statement 
admitting relevant facts that the specific classified information would tend to prove; or <B) the 
substitution for such classified information of a summary of the specific classified information”). 
H, Analysis 

A. Specific Documents 

7he Court has reviewed] 


| CIA documents] 

| that were withheld from discovery pursuant to Rule 16 and CiPA. These 
documents contain classified information, but are arguably discoverable under Rule 16 because 
they mention the Leaks. Many of them, however, are irrelevant to the charges against Schulte, as 
they mention the Leaks only in passing and do not go to any of the charged conduct—the theft 
and transmission of the Leaks to WikiLeaks. 

ihe documents that are relevant and would be discoverable under Rule 16 dearly 
implicate the ■state-.sccreus pri vilege. The Ciovernmcm declaration., from 

Wgb who 

the privilege after personal consideration. See Are/, 533 1.3d at 80. These documents contain 


highly sensitive information] 


| such that "there is a reasonable 
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xposo ... mailers which, in Lhc iniercsi of national 
security, should not he divulged," Id (internal uuotations omitted). Specifically, disclosure of 


danger that compulsion of the evidence will expose 


these documents 



could impair die United Stales' ability to gather intelligence and 
empower the tInked Stales’ adversaries. See Rahman, 870 F. Supp, at 50, 


Most of 


•the relevant documents arc not helpful or material to Schulte. 



These documents would only help 

,hc Government's ease, as they show that the I eaks caused harm, and would no. help Schulte, 
.SVe Kalman, 870 F. Supp. a, 52 (“Ulneulpatory material which the government does no, intend 
n, offer at trial need not be disclosed. Such information cannot conceivably help a defendant, 
and therefore is both unnecessary and useless to him"). 1 hey would not provide Schulte with 
information about how the leaked informatton was stolen or transmitted, possible alternative 

suspects, or how WikiLeaks ultimately obtained the Leaks. 

Still, the Court finds that three documents are helpful or material to the defense. These 
documents include a report 1 by a CIA taskforce that investigated the Leaks and two documents 


'..his doenruot is ,.o, rMsu.vew.htu ^ o.ficr 


ary drafted by the CIA. Fed. R. (.Tint. P. IftUdCi exempts from disclosure repr 
a I novemment documents made by an attorney lor the government or other govci 


government agent in 


, however, does not appear to have been 


summ 

internal government 

connection with investigating or prosecuting the case." '! Ins report, 
drafted in funheranee of the prosecution of this case, but rather was \vt hum | 

There is no indication that the report's author is an attorney or was part ol the 
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that contain information about where the Government believes the leaked information was taken 
from the CIA's Local Area Network (“DevI,AN”), These documents 

might a 

theory that DcvLAN’s vulnerabilities could have allowed someone else to have taken the leaked 
data. They also support the defense’s theory that Schulte’s behavior while an employee of the 
CIA was consistent with someone who was trying to help the agency address security flaws, 
rather than someone who was a disgruntled employee. Accordingly, these three documents go 
“to the innocence of the defendant vel mn, impeachfj... evidence of guilt, or makef] more or 

less probable any fact at issue in establishing any defense to the charges.” United Slates v. Yimis . 
867 F.2d 617, 624 (D.C. cir, 1989). 

1 he Government has proposed redactions or summaries of these documents, which the 
Court lias reviewed and concludes provide Schulte "with substantially the same ability to make 
the.r defenses as would disclosure of the specific classified information ” 2 United States v. 
F “ mvaz ' 87 98 Crim - !<>23(LAK), 2013 WL 5429226, at * I (S.f).N.Y, Sept. 24. 2013). The 
redactions and summaries accurately represent the original documents without obscuring any of 
tire infonnation that is helpful to Schulte, while minimizing the amount of irrelevant classified 


investigation team far th e present case. 

I Id* ,s l10( the type of government renorHhauHlsmdh^Ydud.'d 
hum discovery pursuant to Rule It, (a)(2). Compare United Sum v, AWtav/t, No. 12 CR 00778 RAC 0 
M. 1697.13,. • 1 (S.D.N.Y. Jnn. 15,2014) (Item,, 

won for certain controlled substances and background information about how tests were performed on 

srrrr.*, r; •*.* ^ - - *«*** mZSi 

concerning «,fa,*,!,!, ' ^ ' ”” <***■« ^ ‘"-V"*)- «» 

The Ciovenmicnl m.inlai™ 41,.,, On.,,- di.covmblc „„d«a re no, helpful ,[„ fcftnrhn, 

Iln Women, «l.,onrgnen ..I,,. in6 m „„i„„ cm.. in is —TlO . uhf, m!. 

mfomnnmn has already bnc, prodm-cl n, Dnfcnjum '' ' m 
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information .ha. could he disclosed. This approach strikes .he right haiaucc be,wee, pro.ecuug 
thc now ofinformalion against Schulte’s righ, ,o prepare his defense. .See MM*. 992 K Supp. 

2d a, 338. see geoemHy ,8 U.S.C. AW. 3 5 4 (no.ing <ha, ,he four, may «<■«■» 

Government ,0 ’’substitute a summary for classified information,. The Governmen, is d,reeled 

produce these three documents in .heir redacted or summarized forms. 

B. Email Communications 

The Government conducted a review of every email and chat sen, by or» Schuhc, bu, 
produced only those documents i, viewed as relevant to the charged conduct, vvtth redaettous to 

ceriain e,ossified informa,.. Defense counsel has refines,ed Schulte's entire email account, and 

the Government has indicated tha, it is wiliing to snpp.emen, Us production by producing all of 
Schuitc’s sen, emaii communications during the retevan, time period. Relevant communicatrons 
have already been produced to satisfy the obligations of Rule 16, and the Government's 
proposed compromise provides Schuhc with further access to emails he drafted so tha. he may 
craft his defense, while protecting agaiusi the disclosure of irrelevant classified infon-ion. such 
as information that could identify undercover CIA officers, from emails sen. to Schulte. 
Government’s proposed compromise comports with its obligations under Rule ,6 and CIPA3 

c. Forensic Discovery 

The Court now turns to the complex topic of forensic discovery. A, trial, thc 
Government must establish that Schulte accessed and stole classified information from DevLAR 
The Government will need to explain to a jury how the < ’TVs systems were structured, 
demonstrate wha, Sehuhe’s activities were on the CIA’s system that indicate he stole the leaked 


nation about the CIA was also properly 


1 Other identifying information for CIA officers and rtd P'Tc-n onuiuc'i” classified discovery. Any further 
withheld. Relevant identifying information has already been produced in 

information is either irrelevant or cumulative. 
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data, and show that other individuals did not steal the leaked data. Accordingly, forensic 
evidence, such as log Hies, metadata, backup data, and removable storage devices will comprise 
a large part of the evidence in support of the Government’s case. Schulte has requested that the 
Government provide him with a complete forensic copy of the Schulte Workstation and 
DevLAN, so that his cleared expert can conduct a comprehensive forensic analysis to rebut the 
Government’s forensic case and show that individuals other than Schulte within or outside the 
CIA could have or did steal the leaked data. 


I he Government states that the only forensic evidence that is consistent with the removal 


of the leaked information is on the Schulte Workstation, and uses this conclusion to justify 
turning over only some data from Schulte’s Workstation—the data that supports the 
Government s theory ol its case. I he Government also did not produce a complete forensic copy 
of DevLAN, which could show other users’ activity and potential vulnerabilities of the system, if 
any existed. I he Court reviewed the Government’s methodology for identifying and excluding 
irrelevant and/or classified material, which the Government asserts protected CIA equities while 
still providing the defense with access to relevant information. The Government claims that the 
CIA’s procedure for identifying and deleting irrelevant documents was reasonable and necessary 
to facilitate production of voluminous discovery, but that to the extent Schulte articulated a 
justifiable need for additional material, the Government would work with the defense and the 


CIA to produce that material. This approach is generally satisfactory. 

In the interest of putting ourselves in the shoes of defense counsel, who cannot read the 
CfPA § 4 brief, and acting with a view of Schulte’s interests, Amawi, 695 F.3d at 47!, tire Court 


recognizes that the form of the Government’s initial production of forensic discovery may create 


difficulties for Schulte’s cleared 


forensic expert to conduct his investigation to aid in Schulte’s 
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U may be the case ft* more disclosure of .he Schulte Workstation and Devt.AN would 
he relevant and helpful to Schulte and discoverable under Rule 16. The primary evidence tying 
Schulte to the theft of the leaked data is forensic in nature, and centers on the Schulte 
workstation and Devi.AN. H is no. Schulte's burden to establish who took the data; rather, the 
government must establish beyond a reasonable doubt what Schulte did. Indeed, Schulte has no 
burden Still, the defense may conduct its own investigation into whether anyone other than 

Schulte could have smlen the da,a. See , W**>«*«« 

defendants must -he afforded a meaning, opportumty to present a complete defense To 

safeguard that right, the Conn has developed what might loosely he called the area of 
constitutionally guaranteed access to evidence”). Under Rule 16, the Ooven,men, must produce 
only the evidence that i, plans to use in its own case-in-chief, but also the data .ha, is materia, 

to Schulte’s defense. See Fed. R. Crim. P. 16(a)(l )(E). 

Without a deeper review of Devi-AN, Schulte may be hindered in rebutting the fores,c 

evidence which is the basis for the Government’s ease. On the other hand, the Government must 
introduce at trial voluminous forensic evidence to establish Schulte's guilt. All .it that evidence 
will be subject to vigorous cross examination. The complex measures that arc currently in place 
ensure ft* the classified discovery in this case is reviewed in a secure facility by cleared 
attorneys and Schulte himself should alleviate some concerns about Schulte's trial preparation. 

Of course, the Court is mindful of the immense sire of,he lull universe »f forensic data 
and of the serious national security concerns inherent to producing the totality of Schulte's 
reguests. The Government pn, in a great deal of planning and el'l'or, in collecting, reviewing, and 
producing wha, might he an unprecedented volume ...'classified discovery to Schulte. Complete 
forensic copies of the Schulte Workstation and DevLAN would eornain a tremendous amount of 
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leaking information he obtained from his employment at the CIA both before he was arrested 
and from his cell at MCC after his arrest/’ Granting him unfettered access to the Schulte 
Workstation and DevLAN would gut the entire rationale behind CIPA. There is clearly li a 
reasonable danger that disclosure of this evidence will expose . . . matters which, in the interest 


oi national security, should not be divulged.” A ref 533 F.3d at 80. 5 


Both sides have strong interests. The Government’s approach strikes the Court as more 
reasonable than Schulte’s, given the purpose of CIPA, the strong national security interests that 
are implicated by the data he requests, and the vast scope of Schulte’s demands. Schulte is not 
entitled to unfettered access to the Schulte Workstation and Devi.AN. Still, the Court will leave 


open the possibility of ordering production of forensic data beyond what supports the 
Government’s own theory of the case if Schulte submits a more tailored request and provides 
good reason for further forensic discovery in a motion to compel. In this context, it would also 
be helpful, for example, if Schulte would communicate his thinking of how others are 


responsible for the theft. 


Ifthe parties can resolve forensic discovery issues by meeting and conferring in light of 
this opinion, all the better. The Government and Schulte have been cooperating to resolve 


Sclmlte Has filed a motion to suppress the evidence seized from his cell at MCC. (Dkt. 97.) 

The declarations submitted by the Government describe the process and justification for deletions of certain 
forensic data, in accordance with Aref 
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discovery disputes already. 6 This collaboration should continue with regard to the Schulte 
Workstation and DcvLAN. 

CONCLUSION 

The Government’s motion is granted in part. The CIl’A § 4 submissions will be sealed. 
The CIA is directed to complete classification review of this Order within 14 days. This Order 
will be considered presumptively classified until then. A public Order will he published with 
necessary redactions upon completion of the classification review. 


Dated: New York, New York 
July 22, 2019 


SO ORDERED 



PAUl.A.CROT'n 7 ' 

United States District Judge 


6 The Government has offered to produce additional source code that is relevant to the tools Schulte worked on at 

the CIA, if a need is articulated. The Government hits also offered to produce further log tiles that Schulte’s 
expert needs to conduct a forensic investigation. In addition, the parties’ forensic experts have met, so that the 
Government's export can articulate what forensic evidence does or does not exist, and so that Schulte s expert 
can explain what further discovery Schulte needs to conduct an investigation so that he may present his own 
forensic case to the jury that he could not have, or someone else could have, stolen the leaked data. 






